home

streamserver.dll

MD5:
d3983be1b9351442f31c7c785b9d64e7

SHA-1:
d3158c75059b271400e1fb4abcb3effcab29686d

SHA-256:
93e32e9058c23b402bcec21ae9e0640a9ab7db69b21aafc904b2faa67cadd8c2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/13/2025 10:48:25 AM UTC  (today)

File size:
54.4 KB (55,660 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\streamserver.dll

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
768:JFSiSp0/AFq2aKeN4Qie1FcD4w5ZiGofhgkL:JFMp04Fq2a/rXc8w5ZiGgGy

Entry point:
69, 0A, 67, 20, 30, 65, 66, 36, 66, 66, 33, 33, 2D, 34, 33, 37, 64, 2D, 34, 61, 66, 36, 2D, 39, 61, 32, 63, 2D, 30, 39, 64, 66, 38, 34, 33, 61, 63, 66, 66, 66, 0A, 71, 30, 20, 36, 36, 35, 2E, 35, 36, 20, 36, 37, 32, 2E, 34, 20, 36, 36, 35, 2E, 35, 20, 36, 36, 32, 2E, 37, 39, 20, 36, 38, 34, 2E, 38, 32, 20, 32, 38, 35, 2E, 32, 35, 20, 31, 2E, 30, 39, 20, 30, 20, 21, 20, 21, 20, 30, 2E, 36, 39, 33, 30, 38, 20, 34, 36, 38, 37, 36, 32, 20, 21, 20, 21, 20, 21, 20, 38, 20, 53, 75, 6E, 47, 61, 72, 64, 5F, 44, 0A...
 
[+]

The file streamserver.dll has been seen being distributed by the following URL.

http://streamer.money.cnn.com/.../streamserver.dll?Version=1&Rollup=2000&Timeout=180&siteid=2536&Heartbeat&Quote.BestAvailable&FeedSelection.Group=StreamerSungard&Quote=0,45294,t,0&Quote=1,74836,t,0&Quote=2,78816,t,0&Quote=3,89999,t,0&Quote=4,105455,t,0&Quote=5,205257,t,0&Quote=6,211573,t,0&Quote=7,253562,t,0&Quote=8,263440,t,0&Quote=9,268073,t,0&Quote=10,284943,t,0&Quote=11,568838,t,0&Quote=12,569857,t,0&Quote=13,572009,t,0&Quote=14,572094,t,0&Quote=15,575769,t,1&Quote=16,576473,t,0&Quote=17,579435,t,1&Quote=18,599362,t,1&Quote=19,27633979,t,0&Quote=20,29872678,t,0&Quote=21,73431701,t,0&Quote=22,93098952,t,0&_cachebust_=1451319929085

Scan streamserver.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.